$ rpki-client -vvf rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft File: zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft (raw, json) Hash identifier: VDJQDsPBl57gjpUUzk01UDq8B5u0AeGlUTVKq7d9huQ= Subject key identifier: 8E:CD:FB:05:20:EE:B4:DD:8C:08:5D:DC:C8:85:DD:86:B7:CF:9D:19 Authority key identifier: CC:E0:83:47:9C:46:72:DF:99:28:BA:A8:38:F2:AB:28:02:6D:EF:F7 Certificate issuer: /CN=A91540B9/serialNumber=CCE083479C4672DF9928BAA838F2AB28026DEFF7 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft Manifest number: 01D3 Signing time: Fri 25 Apr 2025 02:01:13 +0000 Manifest this update: Fri 25 Apr 2025 02:01:12 +0000 Manifest next update: Fri 02 May 2025 02:01:12 +0000 Files and hashes: 1: zOCDR5xGct-ZKLqoOPKrKAJt7_c.crl (hash: BvgH3I4VfhAa8xn1kdafn6WS8eBla92LkSxcCRlC0CA=) 2: 0E4247485B5811ED91760C7DC4F9AE02.roa (hash: qbxShxJ7AuiZAM9HFVwuKcG851IE5SsittqszSxEAtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.crl rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91540B9, serialNumber=CCE083479C4672DF9928BAA838F2AB28026DEFF7 Validity Not Before: Apr 25 02:01:12 2025 GMT Not After : May 2 02:01:12 2025 GMT Subject: CN=680aece8-c534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:a2:2a:f6:6b:91:ff:4d:d6:12:d0:0e:71: e7:c3:4a:c0:53:09:7d:ff:17:a3:f2:54:e5:dd:30: 86:8c:a8:71:ff:10:00:b3:da:18:45:00:b5:30:f6: a0:9a:5b:27:b5:4f:d2:de:c7:43:06:fd:7a:4f:03: ef:ab:61:ec:81:28:32:a4:2e:79:f0:45:d9:e1:9e: 05:01:b6:26:86:ca:4d:62:71:81:46:e6:7b:ce:79: 07:4f:4f:b5:cd:49:9b:e2:f9:df:34:ca:50:de:3e: e1:39:08:4a:0e:f4:14:6d:e6:ca:c6:f6:fb:73:6d: da:66:53:79:2d:5c:da:19:24:1e:ba:1f:cb:8a:11: 70:0a:f8:ca:f0:f3:75:a4:bf:3f:b5:75:1e:8b:14: e8:47:65:95:54:cb:a3:a7:94:9b:a5:25:09:a3:22: 94:b8:3c:59:dc:91:09:38:65:7a:84:71:26:aa:5b: 40:f8:91:25:da:06:8a:11:b8:65:c6:54:1b:20:85: ae:92:61:ef:91:d3:20:09:e7:53:fe:af:30:32:fd: 42:1a:4f:8d:59:be:46:22:0f:31:97:86:be:84:4d: 60:8d:a1:13:05:d1:ce:41:12:ea:07:a2:34:ad:8c: 78:12:fa:ef:42:95:f4:97:f8:56:3b:99:02:e4:e1: c8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CD:FB:05:20:EE:B4:DD:8C:08:5D:DC:C8:85:DD:86:B7:CF:9D:19 X509v3 Authority Key Identifier: keyid:CC:E0:83:47:9C:46:72:DF:99:28:BA:A8:38:F2:AB:28:02:6D:EF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1e:55:c8:90:61:10:ca:77:eb:ba:6a:f2:b0:52:2f:f0:e6: 17:34:bf:56:fe:63:71:53:40:61:18:5d:70:0f:42:bf:f3:6f: ad:36:89:17:ce:cd:dc:7f:6c:13:9b:12:ec:3f:ac:b4:b9:c7: 79:33:76:0f:24:bb:c6:ff:d7:22:f8:ce:25:50:89:33:62:65: fb:a4:08:9f:ce:fe:eb:9e:50:02:12:8c:41:dd:0d:81:12:c9: a8:d3:a0:f9:c6:29:7a:cf:a0:82:ac:dd:06:19:7a:02:75:ba: 6c:77:dd:15:be:65:27:68:17:af:be:d5:54:81:70:ee:5b:86: a0:dd:b5:bc:5b:5e:b9:5f:0a:6a:9c:1e:bb:63:42:8b:d9:d2: 9b:61:4e:9f:4c:a0:f5:61:36:d8:a7:20:c3:2f:2e:cc:d7:b3: ed:1d:62:dc:21:aa:76:b4:05:dc:c0:2a:c5:b0:5a:46:44:00: 73:ae:3a:f1:f1:b2:8b:f6:9b:31:13:c9:ac:d7:a5:37:78:d6: ce:a5:5b:b1:29:22:1a:99:60:c8:78:f7:5b:38:dc:ce:70:6b: f9:98:db:79:2c:bb:d8:c7:2f:e8:93:2f:b3:76:ac:2d:44:70: 89:ae:5e:ad:a1:6d:d5:f0:5e:c9:be:80:cd:3c:4e:63:6a:f4: 99:6b:9a:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwQjkxMTAvBgNVBAUTKENDRTA4MzQ3OUM0NjcyREY5OTI4QkFBODM4RjJBQjI4 MDI2REVGRjcwHhcNMjUwNDI1MDIwMTEyWhcNMjUwNTAyMDIwMTEyWjAYMRYwFAYD VQQDEw02ODBhZWNlOC1jNTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6miKvZrkf9N1hLQDnHnw0rAUwl9/xej8lTl3TCGjKhx/xAAs9oYRQC1MPag mlsntU/S3sdDBv16TwPvq2HsgSgypC558EXZ4Z4FAbYmhspNYnGBRuZ7znkHT0+1 zUmb4vnfNMpQ3j7hOQhKDvQUbebKxvb7c23aZlN5LVzaGSQeuh/LihFwCvjK8PN1 pL8/tXUeixToR2WVVMujp5SbpSUJoyKUuDxZ3JEJOGV6hHEmqltA+JEl2gaKEbhl xlQbIIWukmHvkdMgCedT/q8wMv1CGk+NWb5GIg8xl4a+hE1gjaETBdHOQRLqB6I0 rYx4EvrvQpX0l/hWO5kC5OHILwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7N+wUg 7rTdjAhd3MiF3Ya3z50ZMB8GA1UdIwQYMBaAFMzgg0ecRnLfmSi6qDjyqygCbe/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDBCOS9ENUMyNTFDODVC NTMxMUVEOTc4RTA1NzdDNEY5QUUwMi96T0NEUjV4R2N0LVpLTHFvT1BLcktBSnQ3 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPQ0RSNXhHY3QtWktMcW9PUEtyS0FKdDdfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDBCOS9ENUMyNTFDODVCNTMxMUVEOTc4RTA1NzdDNEY5QUUwMi96T0NEUjV4R2N0 LVpLTHFvT1BLcktBSnQ3X2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsHlXIkGEQynfrumrysFIv8OYXNL9W/mNxU0BhGF1wD0K/82+tNokX zs3cf2wTmxLsP6y0ucd5M3YPJLvG/9ci+M4lUIkzYmX7pAifzv7rnlACEoxB3Q2B Esmo06D5xil6z6CCrN0GGXoCdbpsd90VvmUnaBevvtVUgXDuW4ag3bW8W165Xwpq nB67Y0KL2dKbYU6fTKD1YTbYpyDDLy7M17PtHWLcIap2tAXcwCrFsFpGRABzrjrx 8bKL9psxE8ms16U3eNbOpVuxKSIamWDIePdbONzOcGv5mNt5LLvYxy/oky+zdqwt RHCJrl6toW3V8F7JvoDNPE5javSZa5oU -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:27 2025 by rpki-client